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15/7/1 (Item 1 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

7028868 INSPEC Abstract Number: B2001-10-6120D-051, C20Q1-10-6130S-07 6 

Title: Cryptographic framework for document- objects resulting from 
multiparty collaborative transactions 

Author (s) : Goh, A. 

Author Affiliation: USM Comput . Scis., Penang, Malaysia 

Conference Title: Medical Infobahn for Europe. Proceedings of MIE2000 and 
GMDS2000 p. 1069-73 

Editor (s): Hasman, A.; Blobel, B.; Dudeck, J.; Engelbrecht, R. ; Gell, G.; 
Prokosch, H-U 

Publisher: IOS Press, Amsterdam, Netherlands 

Publication Date: 2000 Country of Publication: Netherlands xx+1274 
PP * 

ISBN: 1 58603 063 9 Material Identity Number: XX-2001-01527 

Conference Title: Medical Infobahn for Europe. Proceedings of MIE2000 and 
GMDS2000 

Conference Date: June-Oct . 2000 Conference Location: Hannover, Germany 
Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) 

Abstract: Multiparty transactional frameworks (EDI or HL7) often result 
in composite documents which can be accurately modelled using hyperlinked 
document objects. The structural "complexity arising from multi-author 
involvement and transaction-specific sequencing is poorly handled by 
conventional digital signature schemes based on a single evaluation of a 
one-way hash function and asymmetric cryptography. We outline the. 
generation of structure-specific authentication hash-trees for the the 
authentication of transactional document objects, followed by asymmetric 
signature generation on the hash-tree value. Server-side multi-client 
signature verification is the most computationally intensive task, so we 
use the Rabin signature protocol, which results in significantly reduced 
verification workloads compared to the RSA protocol. Data privacy is 
handled via symmetric encryption of message traffic using session-specific 
keys obtained through key negotiation mechanisms based on 
discrete-logarithm cryptography. Individual client-to-server channels can 
be secured using a double key-pair variation of Dif f ie-Hellman (DH) key 
negotiation, usage of. which also enables bidirectional node authentication 
The reciprocal server -to-client multicast channel is secured through 
Burmester-Desmedt (BD) key negotiation, which enjoys significant advantages 
over the usual multi-party extensions to the DH protocol.- The 
implementation of hash-tree signatures and bi/multi-directional key 
negotiation results in a comprehensive cryptographic framework for 
multi-party document objects satisfying both authentication and data 
privacy requirements. (8 Refs) 

Subfile: B C 

Copyright 2001, IEE 



15/7/3 (Item 3 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

6581352 INSPEC Abstract Number: B2000-06-6210C-015 
Title: Secure group communications using key graphs 

Author(s): Chung Kei Wong; Gouda, M . ; Lam, S.S. 



Author Affiliation: Dept. of Comput . Sci., Texas Univ., Austin, TX, USA 
Journal: IEEE/ACM Transactions on Networking vol.8, no.l p. 16-30 
Publisher: IEEE; ACM, 

Publication Date: Feb. 2000 Country of Publication: USA 

CODEN: IEANEP ISSN: 1063-6692 

SICI: 1063-6692 (200002) 8 :'1L. 16: SGCU; 1-1 

Material Identity Number: P94 6-2000-002 

U.S. Copyright Clearance Center Code: 1063-6692/2000/$10 . 00 
Document Number: S1063-6692 (00 ) 01437-0 

Language: English Document Type: Journal Paper (JP) 
Treatment: Theoretical (T) 

Abstract: Many emerging network applications are based upon a group 
communications model. As a result, securing group communications , i.e., 
providing confidentiality, authenticity, and integrity of messages 
delivered between group members, will become a critical networking issue. 
We present, in this paper, a novel solution to the scalability problem of \ 
group/ multicast key management. We formalize the notion of a secure group 
as a triple (U,K,R) where U denotes a set of users, K a set of keys held by 
the users, and R a user-key relation. We then introduce key graphs to 
specify secure groups. For a special class of key graphs, we present three 
strategies for securely distributing rekey messages after a ^oin/leave and 
specify protocols for joining^ and leaving a secure group. 'Tfie^re keying 
strategies and join/leave protocols are implemented in a prototype key 

server we have built. We present measurement results from experiments and 
discuss performance comparisons. We show that our group key management 
service, using any of the three rekeying strategies, is scalable to large 
groups with frequent joins and leaves. In particular, the average measured 
processing time per join/leave increases linearly with the logarithm of 
group size. (28 Refs) 

Subfile: B 

Copyright 2000, IEE 



15/7/4 (Item 4 from file: 2) 

DIALOG (R) File 2: INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

6459169 INSPEC Abstract Number: B2000-02-6210L-120 , C2000-02-6130S-050 

Title: An architecture for user authentication of IP multicast and its 
implementation 

Author(s): Ishikawa, N . ; Yamanouchi, N.; Takahashi, 0. 

Author Affiliation: Multimedia Labs., NTT Mobile Commun. Network Inc., 
Japan 

Journal: Transactions of the Information Processing Society of Japan 
vol.40, no. 10 p. 3728-36 

Publisher: Inf. Process. Soc. Japan, 

Publication Date: Oct. 1999 Country of Publication: Japan 

CODEN: JSGRD5 ISSN: 0387-5806 

SICI: 0387-580 6 (199910) 40: 10L. 3728: AUAM; 1-M 

Material Identity Number: T205-1999-013 

Language: Japanese Document Type: Journal Paper (JP) 

Treatment: Practical (P) 

Abstract: Protocols for IP multicast have been widely implemented on 
various platforms over the past few years. Various multimedia tools have 
been tested on MBone , a virtual multicast network on the Internet. 
However, IP multicast is now at the experimental stage. In order to 
deploy IP multicast over the Internet as a commercial service, several 
issues on IP multicast must be resolved. Such issues include security, 
accounting, QoS and IP multicast address allocation. Among them, one of 
the most important issues on IP multicast is security for IP multicast . 



There are no security functions for IP multicast at this time. IP 

multicast requires many security functions that include user 

authentication function of IP multicast , encryption of IP multicast 

datagrams and key management protocols for IP . multicast . In this paper, 
we propose an architecture for the user authentication function of IP 

multicast , which prevents an unauthorized user from sending and receiving 
IP multicast datagrams, which is considered one of the most important 
security functions of IP multicast . We extend IGMPv2 for the user 
authentication function of IP multicast and use RADIUS as the 

authentication server . We have implemented a prototype system based on 
our architecture on FreeBSD. Implementation results are also described. ( 
17 Refs) 

Subfile: B C 
Copyright 2000, IEE 



15/7/5 (Item 5 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

6085237 INSPEC Abstract Number: B9901-6120B-001, C9901-6130S-001 
Title: Secure group communications using key graphs 
Author (s): Wong, C.K.; Gouda, M. ; Lam, S.S. 

Author Affiliation: Dept. of Comput . Sci . , Texas Univ., Austin, TX, USA 
Journal: Computer Communication Review Conference Title: Comput. Commun. 
Rev. (USA) vol.28, no . 4 p. 68-79 
Publisher: ACM, 

Publication Date: Oct. 1998 Country of Publication: USA 

CODEN: CCRED2 ISSN: 0146-4833 

SICI: 014 6-4 833 (199810) 28: 4L. 68: SGCU/l-N 

Material Identity Number: B579-98004 

Conference Title: ACM SIGCOMM f 98 Conference. Applications, Technologies, 
Architectures, and Protocols for Computer Communication 
Conference Sponsor: ACM 

Conference Date: 2-4 Sept. 1998 Conference Location: Vancouver, BC, 
Canada 

Language: English Document Type: Conference Paper (PA); Journal Paper 
(JP) 

Treatment: Theoretical (T) 

Abstract: Many emerging applications (e.g., teleconference , real-time 
information services, pay per view, distributed interactive simulation, and 
collaborative work) are based upon a group communications model, i.e., they 
require packet delivery from one or more authorized senders to a very large 
number of authorized receivers. As a result, securing group communications 

(i.e., providing confidentiality, integrity, and authenticity of messages 
delivered between group members) will become a critical networking issue. 
We present a novel' solution to the scalability problem of group/ multicast 
key management. We formalize the notion of a secure group as a triple 

(U,K, R) where U denotes a set of users, K a set of keys held by the users, 
and R a user-key relation. We then introduce key graphs to specify secure 
groups. For a special class of key graphs, we present three strategies for 
securely distributing rekey messages after a join/leave, and specify 
protocols for joining and leaving a secure group. The rekeying strategies 
and join/leave protocols are implemented in a prototype group key server 
we have built. We present measurement results from experiments and discuss 
performance comparisons. We show that our group key management service, 
using any of the three rekeying strategies, is scalable to large groups 
with frequent joins and leaves. In particular, the avera'ge measured- 
processing time per join/leave increases linearly with the logarithm of 
group size. (23 Refs) 
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Copyright 1998, IEE 



15/7/7 (Item 7 from file: 2) 

DIALOG (R) File 2 : INSPEC 

(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

03697199 INSPEC Abstract Number: B90056633, C90057859 
Title: A broadcasting cryptosystem based upon Euclidean geometry 
Author (s): Chang, C.C.; Wu, T.C. 

Author Affiliation: Nat. Chung Cheng Univ., Hsinchu, China 
Journal: International Journal on Policy and Information vol.13, no. 2 
p. 179-86 

Publication Date: 15 Dec. 1989 Country of Publication: Taiwan 
CODEN: IJPIDH ISSN: 0251-1266 

Language: English Document Type: Journal Paper (JP) 
Treatment: Theoretical (T) 

Abstract: Using geometrical principles concerned with circles, an 
approach to cryptosystem design for secure broadcasting in a network system 
is presented. With the participation of a central authority server in 
the network system, the method is simple and conforms to secrecy 
requirements. Further, to avoid revealing the encryption/decryption key 
fortuitously, it employs repetitive multicasting or conspiratorial 
principals in the network system. In addition, it is suitable for the 
prevailing network systems of workstations or personal computers . (19 
Refs) 
Subfile: B C 



15/7/8 (Item 1 from file: 34) 

DIALOG (R) File 34 : SciSearch (R) Cited Ref Sci 
(c) 2005 Inst for Sci Info. All rts. reserv. 

10122994 Genuine Article*: BT06R Number of References: 17 
Title: Why hierarchical key distribution is appropriate for multicast 
networks 

Author (s): Gamage C (REPRINT) ; Leiwo J; Zheng YL 
Corporate Source: Monash Univ, Peninsula Sch Comp & Informat 

Technol,McMahons Rd/Frankston/Vic 31 99/Australia/ (REPRINT); Monash 
Univ, Peninsula Sch Comp & Informat Technol, Frankston/Vic 
3199/Australia/; Vrije Univ Amsterdam, Dept Math & Comp Sci,NL-1081 HV 
. Amsterdam//Netherlands/ 
, 2000, V1787, P120-131 

ISSN: 0302-9743 Publication date: 20000000' 

Publisher: SPRINGER- VERLAG BERLIN, HEIDELBERGER PLATZ 3, D-14197 BERLIN, 

GE RMAN Y I N FO RMAT I ON SECURITY AND CRYPTOLOGY - ICISC , 99 
Series: LECTURE NOTES IN COMPUTER SCIENCE 
Language: English Document Type: ARTICLE 

Abstract: The design rationale for many key distribution schemes for 

multicast networks are based on heuristic arguments on efficiency, 
flexibility and scalability. In most instances the choice of key 
server placement in a multicast network architecture is based on 
intuitive cryptographic considerations. We use an analytical model of 
multicast group formation and network growth to look at the selection 
of a key distribution scheme from a network operation perspective. 
Thereafter, this model is used to validate the choice of hierarchical 
(hybrid) key distribution model as the most appropriate. 



15/7/9 (Item 2 from file: 34) 

DIALOG (R) File 34 : SciSearch ( R) Cited Ref Sci 
(c) 2005 Inst for Sci Info. All rts. reserv. 

02607582 Genuine Article#: LQ004 Number of References: 25 

Title: INCREASING AVAILABILITY AND SECURITY OF AN AUTHENTICATION SERVICE 

Author (s) : GONG L 

Corporate Source: SRI INT,COMP SCI LAB/MENLO PK//CA/94025 

Journal: IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, 1993, Vll, N5 ( 

JUN), P657-662 
ISSN: 0733-8716 

Language: ENGLISH Document Type: ARTICLE 

Abstract: Authentication is a process by which one satisfies another about 
one 1 s claim of identity. Typically, an authentication server 
provides the authentication service via an authentication protocol. 
The authentication service is a security bottleneck in that its 
compromise can lead to the compromise of the whole system. The service 
is also a performance bottleneck because many activities cannot proceed 
unless the identities of concerned parties can be satisfactorily 
established. Therefore, a desirable authentication service should be 
both highly secure and highly available. We propose a general solution 
by replicating the authentication server such that a minority of 
malicious and colluding servers cannot compromise security or disrupt 
service. We discuss some unusual features of such a distributed 
authentication service, including the tradeoff between availability and 
security. A distributed service is also useful when clients cannot 
identify or agree upon trusted servers prior to authentication . For 
example, in some cooperative or federated systems, clients simply 
cannot all trust the same set of servers. 

? tl5/7/10 

15/7/10 (Item 3 from file: 34) 

DIALOG (R) File 34 : SciSearch (R) Cited Ref Sci 
(c) 2005 Inst for Sci Info. All rts. reserv. 

02072908 Genuine Article* : JY854 Number of References: 11 
Title: CCITT X.500 DIRECTORIES - PRINCIPLES AND APPLICATIONS 

Author (s) : HUNT R 

Corporate Source: UNIV CANTERBURY, DEPT COMP SCI /CHRISTCHURCH 1//NEW 
ZEALAND/ 

Journal: COMPUTER COMMUNICATIONS, 1992, V15, N10 (DEC), P636-645 
ISSN: 0140-3664 

Language: ENGLISH Document Type: ARTICLE 

Abstract: Directories can be used as a service to provide human users or 
application processes with on-line access to what telecommunication 
services exist,' where they reside, and how the correspondents might be 
accessed and addressed in a distributed environment. They will provide 
for the mapping of user-friendly recipient names to addresses in a 
consistent and standardized manner. In fact, any application which 
interacts with named objects in a distributed environment can benefit 
from the use of directory services. 

? tl5/7/ll, 13-15 

15/7/11 (Item 1 from file: 94) 

DIALOG (R) File 94 : JICST-EPlus 

(c)2005 Japan Science and Tech Corp(JST). All rts. reserv. 

03646670 JICST ACCESSION NUMBER: 98A0672824 FILE SEGMENT: JICST-E 

Architecture for User Authentication of IP Multicast . 

ISHIKAWA NORIHIRO (1); TAKAHASHI OSAMU (1); YAMANOUCHI NAGATSUGU (2) 



(1) NTT Information and Communication System Lab.; (2) IBM Jpn. Ltd., Tokyo 

Res. Lab. Comp. Sci. Inst. 
Joho Shori Gakkai Kenkyu Hokoku, 1998, VOL . 98, NO. 55 (DPS-89) , PAGE. 31-36, 

FIG. 4, TBL.2, REF.10 
JOURNAL NUMBER: Z0031BAO ISSN NO: 0919-6072 

UNIVERSAL DECIMAL CLASSIFICATION: 621. 394/. 395 681.3.02-759 
LANGUAGE: Japanese COUNTRY OF PUBLICATION: Japan 

DOCUMENT TYPE: Journal 
ARTICLE TYPE: Original paper 
MEDIA TYPE: Printed Publication 

ABSTRACT: IP multicast is now at the experimental stage. In order to 

deploy IP multicast ' over the Internet as a commercial service, some 
issues on IP multicast must be resolved. Among them, one of the most 
important issues on IP multicast is security for IP multicast . 
There are no security functions for IP multicast at this time. In 
this paper, we propose an architecture and a protocol for the user 
authentication function of IP multicast which prevents an 
unauthorized user from sending and receiving IP multicast datagrams. 
We extend IGMP for the user authentication function of IP multicast 
and use RADIUS as the authentication server . We describe the 
implementation of a prototype system on FreeBSD based on our 
architecture, (author abst . ) 

15/7/13 (Item 1 from file: 95) 

DIALOG (R) File 95 : TEME-Technology & Management 
(c) 2005 FIZ TECHNIK. All rts. reserv. 

01392075 20000306581 

A time-stamp based solution for collective resource acquisition in a 
distributed system 

Qiang Sun; Hao Zhang; Jianhui Zhang 

Proceedings of the 33rd Annual Hawaii International Conference on System 
Sciences, 4-7 Jan. 2000, Maui, HI, USA2000 
Document type: Conference paper Language: English 
Record type: Abstract 
ISBN: 0-7695-0493-0 

ABSTRACT: 

In some distributed systems, resources are leased, usually for a fixed 
period of time. For instance-, a client leases a network printer for ten 
minutes. We consider the first step of leasing-acquisition, and extend the 
concept of the acquisition of a single resource to that of a collection of 
resources. In such a context, clients must have simultaneous access to all 
of the requested resources for the lease to be useful. The paper describes 
designs and implementations for collective acquisition of resources in 
distributed systems. It begins with the application background of our 
research, followed by the formalization of the problem. We then introduce 
our algorithm and prove its correctness. Two implementations are specified 
and compared. Evaluation of the performance of the algorithms is based on 
the measurements of the network overhead caused by the exchange of control 
messages, and the measurements of the average response time for the 
requests. Implemented in Java, our system makes novel use of multicast to 
enhance performance and uses heart-beat heuristics to achieve fault 
resilience. Finally, we propose approaches to optimize the system 
performance exploiting soft global state information. 



15/7/14 (Item 2 from file: 95) 

DIALOG (R) File 95 : TEME-Technology & Management 



(c) 2005 FIZ TECHNIK. All rts. reserv. 



01371447 20000103501 
Titel japanisch 

(An architecture for user authentication of IP multicast and its 
implementation) 

Ishikawa, N; Yamanouchi, N; Takahashi, 0 

Multimedia Labs., NTT Mobile Commun. Network Inc., J 

Transactions of the Information Processing Society of Japan, v40, nlO, 
pp3728-3736, 1999 

Document type: journal article Language: Japanese 
Record type: Abstract 
ISSN: 0387-5806 

ABSTRACT: 

Protocols for IP multicast have been widely implemented on various 
platforms over the past few years. Various multimedia tools have been 
tested on MBone , a virtual multicast network on the Internet. However, 
IP multicast is now at the experimental stage. In order to deploy IP 
multicast over the Internet as a commercial service, several issues on IP 
multicast must be resolved. Such issues include security, accounting, QoS 
and IP multicast address allocation. Among them, one of the most 
important issues on IP multicast is security for IP multicast . There 
are no security functions for IP multicast at this time. IP multicast 
requires. many security functions that include user authentication function 
of IP multicast , encryption of IP multicast datagrams and key 
management protocols for IP multicast . In this paper, we propose an 
architecture for the user authentication function of IP multicast , which 
prevents an unauthorized user from sending and receiving IP multicast 
datagrams, which is considered one of the most important security functions 
of IP multicast . We extend IGMPv2 for the user authentication function of 
IP multicast and use RADIUS as the authentication server . We have 
implemented a prototype system based on our architecture on FreeBSD. 
Implementation results are also described. 
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16/3,K/1 (Item 1 from file: 9) 

DIALOG (R) File 9: Business & Industry (R) 
(c) 2005 The Gale Group. All rts. reserv. 

01357116 Supplier Number: 24021219 
Switzerland - Bay Networks Unveils New Products 

(Bay Networks has introduced Model 8000 Remote Access Concentrator and 
BaySecure Access Control RADIUS Server) 

Newsbytes News Network, p N/A 
September 09, 1997 

DOCUMENT TYPE: Journal (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 355 



TEXT: 

...later this year. Also launched at the Geneva event is the BaySecure 
Access Control RADIUS Server (Remote Authentication Dial-In User 
Service), incorporating user authentication, authorization and accounting 
systems for enterprise and service... 

...These include high-speed Internet access and video-on-demand over 
broadband, IP (Internet Protocol) video conferencing over xDSL 
(digital subscriber line) and dial virtual private network services. 
According to officials with. . . 



16/3, K/5 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2005 The Gale Group. All rts. reserv. 

06552495 Supplier Number: 55403136 (USE FORMAT 7 FOR FULLTEXT) 
Managing the flow of streaming media. (companies take different approaches 
to video over networks) (Technology Information) 

Meserve, Jason 
Network World, pNA 
August 6, 1999 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 1757 

... and split out to other clients." 

RealProxy offers a work around for users wanting to multicast 
across the. public Internet. The software includes a lightweight accounting 
connection back to the origin server to validate client access and 
track viewership, Cohee says. 

"Quite frankly, a lot of companies that I... 
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DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2005 The Gale Group. All rts. reserv. 

06140923 Supplier Number: 53905639 (USE FORMAT 7 FOR FULLTEXT) 
Computone Winner of the CTI Magazine Product of the Year Award for the 
DCS-5000. 

PR Newswire, p8278 
Feb 19, 1999 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 483 

with new products," Rich Tehrani, CTI Group Publisher. 
Security is a key feature of the server with RADIUS authentication 
and authorization in addition to IP packet filtering. The DCS5000 supports 
dial- up networking with. . . 

...DCS-5000 features enhanced IP routing using OSPF (Open Shortest Path 
First), IGMP (Internet Group Multicast Protocol) and RIP vl and v2 
routing protocol. 

"Computone is proud that our remote access... 
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(c) 2005 The Gale Group. All rts. reserv. 

06110424 Supplier Number: 53698982 (USE FORMAT 7 FOR FULLTEXT) 
BackWeb 5.0 Upgrade: Push With a Twist. (from BackWeb Technologies 
Inc) (Software Review) (Abstract) (Evaluation) 

Rapoza, Jim 

PC Week, vl6, n5, p25(l) 
Feb 1, 1999 

Language: English Record Type: Fulltext 
Article Type: Abstract; Evaluation 

Document Type: Magazine/ Journal ; Tabloid; General Trade 
Word Count: 786 

... server redirects traffic for the clients. 

BackWeb channels can now be secured using standard digital 
certificates , and the server supports IP Multicast through a StarBurst 
Communications Corp. add-on. 

BackWeb 5.0 also provides on-site installation... 
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15/3 ,K/1 (Item 1 from file: 696) 

DIALOG (R) File 696: DIALOG Telecom. Newsletters 
(c) 2005 Dialog. All rts. reserv. 

00740192 
Contracts 

CableFAX 

August 18, 2000 VOL: 11 ISSUE: 162 DOCUMENT TYPE: NEWSLETTER 
PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 510 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 

TEXT: 

. . .Mobile - Diversinet 

Wireless media technology vendor i3 Mobile [IIIM] will use Diversinet 1 s 
[ DVNT] Passport Certificate Server and Authorization Product digital 
permit 

technology under a licensing agreement between the companies. Diversinet 1 s 
Passport Authorization provides secure authorization services over 
distributed 

network architectures. Diversinet f s Passport Certificate Server issues 
digital 

certificates used as the basis for authenticating users in a public key 
infrastructure environment. (Mike Miller... 

...data networks. The Airspan 

terminals will also enable new applications such as ISDN dial backup, 
video 

conferencing , wide area connectivity, and support for frame-relay 
overlays . 

Airspan is deploying base stations for... 



15/3, K/2 (Item 2 from file: 696) 

DIALOG (R) File 696: DIALOG Telecom. Newsletters 
(c) 2005 Dialog. All rts. reserv. 

00712844 

TECHNOLOGY 1 BAKE -OFF 1 ADVANCES INTERNET SESSION INTERCONNECT PROTOCOL 

Communications Standards News 

January 20, 2000 VOL: DOCUMENT TYPE: NEWSLETTER 

PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 1505 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 

TEXT: 

...both persons and "robots", such as a media storage service, to 
join both unicast and multicast sessions and the initiator does not 
necessarily 

have to be a member of the session. . . 

...also be added to an existing session as it 
progresses. 



Sessions can be advertised using multicast protocols such as Session 
Announcement Protocol (SAP), electronic mail, news groups, web pages or 
directories. . .party; 

* Call handling - including the transfer and the termination of calls. 
SIP does not allocate multicast addresses: these are handled by other 
protocols. However, it can initiate multi-party calls using a multipoint 
control unit (MCU) or a fully-meshed interconnection instead of multicast 

The use of SIP is not restricted to the control of calls across the 
Internet ... 

...delivery of streaming media, the Session 

Announcement Protocol (SAP) , used for advertising multimedia sessions via 

multicast and the Session Description Protocol (SDP) (RFC 2327), used for 
describing multimedia sessions. 

SIP can... a different vendor. In this scenario, a 

caller initiating a call was immediately challenged to authenticate 
himself to a 

server . After successfully authenticating , the call was routed through 
three 

servers, causing three separate telephones to ring simultaneously. After. . . 
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DIALOG (R) File 696: DIALOG Telecom. Newsletters 
(c) 2005 Dialog. All rts . reserv. 

00618666 
Deals This Week 

ISP BUSINESS NEWS 

August 10, 1998 VOL: 4 ISSUE: 31 DOCUMENT TYPE: NEWSLETTER 
PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 999 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 

TEXT: 

...Conferencing, which formed an 

alliance in May, stepped up marketing for ViaTV Videophone, which 

enables videoconferencing over data and telephone networks. ViaTV and 

8x8 ' s other videoconferencing products are available through Williams 

Conferencing, a subsidiary of Williams [WMB] and retail channels. 

* Announced. .. Partners, who provide solutions to its HP VirtualVault 

solution. VitrualVault is an integrated Web transaction server 

bundled with Trusted Gateway Agent and the Netscape Enterprise Server, 

designed to provide services such as Internet banking, online billing... 
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00611828 

DIGITAL ISLAND INCREASES CONNECTION WITH CONTINENTAL U.S. 

FIBER OPTICS NEWS 

June 29, 1998 VOL: 18 ISSUE: 26 DOCUMENT TYPE: NEWSLETTER 

PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 559 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 



TEXT: 

...addition to its network expansion, Digital Island is rolling 
out : 

* Global mirrored support that uses multicast technologies to 
mirror data across multiple data centers for reduced content 
distribution costs; 

* Expanded data... name services 
Consulting services 

Remote LAN access 

Intranet services 

Network integration services 

Encryption 

Web design 

Authentication 

Server hosting 
Mirroring 

International services 
High 

Voice services • 

Caching c 

Fax services 

Credit card clearing 

Online conference rooms 

IP multicasting 

Applications hosting 

Source: The Yankee Group ^ 



15/3, K/8 (Item 1 from file: 813) 

DIALOG (R) File 813: PR Newswire 

(c) 1999 PR Newswire Association Inc. All rts. reserv. 
1425055 DAF002 

Computone Winner of the CTI Magazine Product of the Year Award for the 
DCS-5000 

DATE: February 19, 1999 09:45 EST WORD COUNT: 537 

...with new products," Rich Tehrani, CTI Group Publisher. 

Security is a key feature of the server with RADIUS authentication 
and authorization in addition to IP packet filtering. The DCS5000 supports 
dial- up networking with... 

. . . DCS-5000 features enhanced IP routing using OSPF (Open Shortest Path 
First), IGMP (Internet Group Multicast Protocol) and RIP vl and v2 
routing protocol. 

"Computone is proud that our remote access... 



15/3, K/12 (Item 1 from file: 610) 

DIALOG(R) File 610:Business Wire 

(c) 2005 Business Wire. All rts. reserv, 

00010102 1999060B0062 (USE FORMAT 7 FOR FULLTEXT) 



Aventail to License Intel Multicast Technology for Securing Enterprise IP 
Multicast Applications 

Business Wire 

Monday, March 1, 1999 08:32 EDT 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 836 

...addressing the network congestion issues that plague large 
broadcast transmissions. 

Aventail 's support for IP multicast simplifies access and management 
of multicast information services and provide an unprecedented level of 
management and security by combining strong encryption... 

...RADIUS, CHAP, Windows NT Domain, NDS 

from Novell Security Dynamics 1 SecurlD, Hewlett-Packard's Authorization 
Server , and x.509 certificates from Verisign, Netscape, and GTE. 

Utilizing technology developed in the Intel Architecture Labs, 
Aventail will ... 



15/3,K/19 (Item 3 from file: 674) 

DIALOG (R) File 674:Computer News Fulltext 

(c) 2005 IDG Communications. All rts . reserv. 

079353 

Grade -A network 

western heights school district teaches that a unified network can be 
built today 

Byline: julie bort 

Journal: Network World Page Number: 103 

Publication Date: November 15, 1999 
Word Count: 1623 Line Count: 148 

Text : 

. . . money building "JetNet" - its aptly named converged Gigabit Ethernet 
backbone that does it all: voice, ' videoconferencing and video 
broadcasting, as well as storage-area networking . "We think of technology as 
something... users with 1 , 470 . desktop computers and 30 Dell PowerEdge 
servers. A handful of these servers are dedicated to authentication , 
network management ande-mail. The rest are clustered to handle the 
district ! s advanced video... 

... network for video broadcasting . Teacher 1 s PCs are equipped with Intel f s 
ProShare 5.1 videoconferencing software and Cisco ! s IPTV client, so they 
can conduct live confer-ences with other ProShare-equipped machines and 
stream video over the LAN-. Videoconferencing over the 'Net requires 
ProShare with VideoServer Encounter NetGate; classes can be 
videoconferenced to as many as 28 end points. Western Heights conducts 
three videoconf erence classes daily between the middle school and high 
school. Both schools have labs with ProShare PCs . "We eventually see our 
students on cable modems, able to do videoconferencing , reviewing lessons 
at home at night, doing make-up classes and accelerated classes. Schools 
have . . . 
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076731 

Managing the flow of streaming media 

Byline: JASON MESERVE 
Journal: Network World 
Publication Date: August 05, 1999 
Word Count: 1725 Line Count: 156 

Text : 

... organization and the cable head ends that his company services. Right 
now, the company is multicasting single events down to cable companies 
using its own network of 15 satellites. Pasetta hopes ... state-of-the 
company addresses . For live video, there are basically two management 
options: IP Multicast or signal splitting. In a multicast , network, a 
single stream is sent out to a single session address. The stream is... 

. . . routed to all subnets that have clients requesting to view or listen to 
the broadcast. Multicast -enabled clients, such as RealNetworks 
RealPlayer, need only tune to the specified multicast address. Multicast 
can support thousands of users with a single stream. In a standard 
streaming model, each. . . 

. . . pipe through the network, unicasted live events quickly degrade under 
heavy load. Many agree that multicast is the way to go when doing a live 
broadcast across the. network. The only problem is the entire network of 
routers must be multicast -enabled. This is easy if one owns the entire 
network and can ensure multicast availability. But for streams that must 
travel across the Internet, multicast is no longer a viable option, as 
there is no way to ensure that each router in the path is multicast 
-enabled. Multicast Backbone ( MBone ) is an experimental overlay network 
that allows for IP multicasting across the public Internet. However, 
because MBone is a volunteer cooperative, its commercial use is 
limited. The Pentagon uses IP multicast internally for its broadcast, with 
unicasted streams supporting remote outposts and users, says Connie Leonard 

... to participate," Leonard says. She hopes that over time, more of the 
sites will become multicast enabled, allowing her group to provide more 
services for distant end-user communities. A splitting imageSplitters 
provide an alternative to IP multicast for live broadcasts by taking a 
single stream coming from the origin server and splicing. . . 

. . . pulls in one stream and can replicate it out to many clients using 
unicast or multicast , according to Brian Cohee, product manager of core 
technologies for RealNetworks. "You can't pull... 

...and split out to other clients . "RealProxy offers a work around for users 
wanting to multicast across the public Internet. The software includes a 
lightweight accounting connection back to the origin server to validate 
client access and track viewership, Cohee says. "Quite frankly, a lot of 
companies that I . . . 
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APPARATUS AND METHOD FOR TRANSMITTING MESSAGES ACROSS DIFFERENT MULTICAST 
DOMAINS 

APPAREIL ET PROCEDE DE TRANSMISSION DE MESSAGES ENTRE DIFFERENTS DOMAINES 
DE MULTIDIFFUSION 

Patent Applicant/Assignee: 
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Patent Applicant/Inventor: 
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Main International Patent Class: H04L-012/18 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 



Detailed Description 
Claims 

Fulltext Word Count: 9647 



English Abstract 

A border network device for transmitting messages between a first 
multicast domain and a second multicast domain .includes a first interface 
that receives a first domain message from the first domain for delivery 
to the second domain, a first message converter that converts the 
received first domain message into a first intermediate message, and an 
output that forwards the first intermediate message to a receiving second 
network device in the second domain. The first multicast domain and 
second multicast domain each respectively have first network devices and 
second network devices. In preferred embodiments, the first domain 
message has first domain origin data. Messages with first domain origin 
data originate from at least one of the first network devices. In a 
similar manner, the intermediate message includes intermediate data 
indicating that the intermediate message originates from the border 
network device. 

French Abstract 

La presente invention concerne un dispositif de reseau frontiere pour la 
transmission de messages entre un premier domaine de multidif fusion et un 
deuxieme domaine de multidif fusion comportant une premiere interface qui 
recoit un message de premier domaine en provenance du premier domaine a 
etre delivre au deuxieme domaine, un premier convertisseur qui convertit 
le message de premier domaine recu en un premier message intermediaire, 
et une sortie qui achemine le premier message intermediaire vers un 
deuxieme dispositif de reseau dans le deuxieme domaine. Le premier 
domaine de multidif fusion et le deuxieme domaine de multidif fusion 
presentent chacune respectivement des dispositifs de premier reseau et 
des dispositifs de deuxieme reseau. Dans des modes de realisation 
preferes, le premier domaine possede des donnees d'origine de premier 
domaine. Le messages a donnees d'origine de premier domaine emanent d ! au 
moins un des dispositifs du premier reseau. De meme, le message 
intermediaire comporte des donnees intermediaires indiquant que le 
message intermediaire emane du dispositif de reseau frontiere. 

Legal Status (Type, Date, Text) 

Publication 20001019 A2 Without international search report and to be 
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Search Rpt 20010104 Late publication of international search report 
Search Rpt 20010104 Late publication of international search report 
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Detailed Description 

Claims 

Fulltext Word Count: 8527 
English Abstract 

Threshold cryptography (secret sharing) is used for exchanging a secret 
between a server and a client over an unreliable network. Specifically, a 
secret is computationally divided into N shares using a threshold 
encryption scheme such that any M of the shares (M less than or equal to 
N) can be used to reconstruct the secret. The N shares are spread over a 
number of transmitted messages, with the assumption that some number of 
the messages including a total of at least M shares will be received by 
the client. Upon receiving at least M shares, the client uses the at 
least M shares to reconstruct the secret using the threshold encryption 
scheme . 

French Abstract 

La presente invention concerne une cryptographie a seuil (partage de 
donnees secretes) qui s 1 utilise pour 1 1 echange de donnees secretes . entre 
un serveur et un client sur un reseau non fiable. Plus specif iquement, 
ces donnees sont divisees par calculateur en N parts a l'aide d ! un 
systeme de chiffrement a seuil selon lequel une M part quelconque des 
parts (M etant inferieur ou egal a N) peut etre utilisee pour 
reconstruire les donnees secretes. N parts sont dispersees sur un certain 
nombre de messages transmis, par supposition que certains des messages 
comprenant un total d ! au moins M parts seront recus par le client. A la 
reception d ! au moins M parts, le client utilise celles-ci pour 
reconstruire les donnees secretes a l'aide du systeme de chiffrement a 
seuil. 

Legal Status (Type, Date, Text) 

Correction 20020214 Corrected version of Pamphlet: pages 1/5-5/5, 

drawings, replaced by new pages 1/5-5/5; due to late 
transmittal by the receiving Office 

Correction 20010412 Corrections of entry in Section 1: 



Republication 20020214 Al With international search report. 



7/5/3 (Item 3 from file: 349) 

DIALOG (R) File 34 9:PCT FULLTEXT 

(c) 2005 WIPO/Univentio. All rts. reserv. 

00575019 **Image available** 

APPARATUS AND METHOD FOR DISTRIBUTING AUTHENTICATION KEYS TO NETWORK 
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Claims 

Fulltext Word Count: 7256 
English Abstract 

An apparatus and method of distributing an authentication key to 
multicast network devices in a multicast loads a set of the multicast 
network devices with a security key that is unavailable to network 
devices that are not members of the multicast. The authentication key 
then is encrypted via the security key to produce an encrypted 
authentication key that is forwarded to the set of multicast network 
devices. The security key enables the set of multicast network devices to 
decrypt the encrypted authentication key. to produce the authentication 
key. The authentication key preferably is utilized by the multicast 
network devices to authenticate messages transmitted in the multicast. 

French Abstract 

L' invention concerne un appareil et un procede de distribution d f une cle 
d 1 authentif ication a des dispositifs de reseau multidestinataire . Ledit 
procede consiste a stocker sur un* ensemble de dispositifs de reseau 
multidestinataire une cle de securite non disponible pour les dispositifs 
de reseau non membres du systeme multidestinataire. Ensuite, la cle 
d* authentif ication est codee avec la cle de securite pour produire une 
cle d ' authentif ication codee qui est transmise a 1' ensemble des 
dispositifs de reseau multidestinataire. La cle de securite permet a 
1' ensemble des dispositifs de reseau multidestinataire de decoder la cle 
d'authentification codee, de facon a produire la cle d 1 authentif ication . 
II est preferable que les dispositifs de reseau multidestinataire 
utilisent la cle d 1 authentif ication pour authentif ier les messages 
transmis dans le systeme multidestinataire. 
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Detailed Description 
Claims 

Fulltext Word Count: 9293 
English Abstract 

An apparatus and method for limiting unauthorized access to a multicast 
by one or more members of a subnet reconfigures the multicast if all 
subnet members participating in the multicast do not reply to a query 
message. To that end, the apparatus first receives a query message 
requesting the identity of all subnet members that are participating in 
the multicast. Upon receipt, the query message is forwarded to each 
subnet member that is participating in the multicast. Receipt of the 
message by selected subnet members participating in the multicast causes 
a reply message to be forwarded. It then is determined if a reply message 
has been forwarded by all subnet members participating in the multicast. 
French Abstract 

La presente invention concerne un appareil et un pr.ocede permettant de 
limiter les acces illicites a une multi-diffusion d f un ou plusieurs 
membres d ! un sous-reseau, et consistant a reconfigurer la multi-diffusion 
si tous les membres du sous-reseau participant a la multi-diffusion ne 
repondent pas a un message posant une question. A cet effet, 1' appareil 
recoit d'abord un message demandant l'identite de tous les membres du 
sous-reseau participant a la multi-diffusion. Lorsque ledit appareil 
recoit ce message, celui-ci est retransmis a chaque membre du sous-reseau 
participant a la multi-diffusion. La reception du message par les membres 
du sous-reseau selectionnes et participant a la multi-diffusion entraine 
la retransmission d'un message de reponse . C'est alors qu'il est 
determine si le message de reponse a ete retransmis par tous les membres 
du sous-reseau participant a la multidif fusion . 
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ABSTRACT EP 892530 A2 

A method for a client to locate a particular service from a service 
provider on wide area computer networks. The method includes multicasting 
of an advertisement from a service provider, which advertisement is 
detected by a Service Broker and in turn multicast into the wide area 
computer network, A client queries the network when seeking a particular 
service and receives in turn the address of the Broker and a Server to 
obtain the service desired. 
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.CLAIMS of: 



registering, with a Notary, an advertisement generated by a Server, 
providing, by the Notary, authentication for the Servers it 
represents, and 

multicasting , by the Notary, the advertisements for the Servers 
registered with the Notary. 
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ABSTRACT EP 883306. A2 

A system and method for teleconferencing between conferees connected 
through a connectionless network and conferees connected through a 
connection-oriented network having a bridge. A call server connects to a 
bridge hosting a teleconference among connection-oriented conferees and 
joins the teleconference. The connection-oriented signal received by the 
call server is converted into a connectionless signal and sent to 
authorized, authenticated conferees connected through the connectionless 
network. The call server receives a connectionless signal from a conferee 
through the connectionless network, converts the signal to a 
connection-oriented signal and sends the connection-oriented signal to 
the bridge. Connectionless signals are stored in a database to be 
analyzed or sent to other conferees, such as those who were unavailable 
to join the teleconference as it occurred. The call server provides 
multimedia interfaces to conferees by which the conferees can monitor and 
join an ongoing teleconference, access a stored teleconference, or 
configure a new teleconference. The call server can also bridge 
teleconferences hosted on two or more bridges, expanding the audience for 
a given teleconference beyond the capacity of a single bridge. 
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...CLAIMS a teleconference from a list of authorized teleconferences sent 
by said call server to the conferee and displayed to the conferee 

9. The apparatus of claim 1, wherein said call server authenticates 

the identity of a conferee . 

10. A method for teleconferencing between connectionless conferees 
connected through a connectionless network and connection-oriented 
conferees connected through a connection-oriented network... 

...signal to a connectionless output signal; and 

g. sending connectionless output signal from the call server to the 
authenticated connectionless conferee . 

11. The method of claim 10, wherein said connection-oriented 
teleconference data signal of step b includes access codes needed t 
join a teleconference hosted by. . . 
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ABSTRACT EP 868059 A2 

The present invention relates to a data transfer method and a system in 
a computer network to which are connected a number of computers, more 
specifically to a data transfer method of stream data continuous in time 
series and a system for it. The present invention makes a request for 
change of rate from the client 470 in correspondence to the state of 
vacancy of said receiving buffer 412, and changes the send rate on the 
server 400 based on that request for change of rate. -This prevents any 
overflow of stream data from the receiving buffer 412. Furthermore, based 
on the re-transfer request issued from the client 470 in correspondence 
to the loss of stream data received by said packet receiving means 410, 
the storing means on the server 400 sends out data corresponding to the 
lost data concerned. This makes it possible to compensate for the loss in 
case of occurrence of any data loss. 
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...CLAIMS for change of rate is prohibited for a prescribed time set in 
advance . 

21. A multicast stream data transfer method as defined in Claim 19, 
wherein said server validates , in the case where a request for 
change of rate of one same contents was... 

...request for re-transfer is prohibited for a prescribed time set in 
advance . 

24. A multicast stream data transfer method as defined in Claim 22, 
wherein said server validates , in the case where a request for 
re-transfer of one same contents was received. . . 
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Claims 
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English Abstract 

According to one embodiment of the invention, a free preview of a program 
can be provided to client computers in a multicasting system. This can 
allow viewers in the multicasting system to view a first portion of the 
program before deciding whether to order the program content. According 
to another embodiment, various distribution methods can be accomplished 
using encryption keys to distribute program content. According to yet 
another embodiment, an initial viewing period can be provided to allow 
negotiation of the encryption keys. According to another embodiment, 
rules and conditions for providing content in a multicasting environment 
can be utilized. 

French Abstract 

Selon un mode de realisation de 1 ! invention, une previsualisation 
gratuite d'un programme peut etre fournie a des ordinateurs clients dans 
un systeme multidif fusion . Ceci permet a des personnes dans le systeme 
multidif fusion de visionner une premiere partie du programme avant de 
decider de commander ou non le contenu du programme. Selon un autre mode 
de realisation, divers procedes de distribution peuvent etre realises au 
moyen de cles de chiffrement en vue de distribuer le contenu de 
programme. Selon un autre mode de realisation encore, une periode de 
visualisation initiale peut etre fournie afin de permettre une 
negociation des cles de chiffrement. Selon un autre mode de realisation 
encore, des regies et des conditions destinees a fournir le contenu dans 
un environnement multidif fusion peuvent etre utilisees. 
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drawings, replaced by new pages 1/13-13/13; due to 
late transmittal by the receiving Office 
Republication 20031120 A3 With international search report. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

periodically given new keys using a multicast UDP message which has a 
new program segment key encrypted for each participant using that 
participant's unique key . 

When a client decides to leave the multicast session, the client sends 
an authenticated request to the server asking to be removed from the 
list. This signals, the server to log the time... 
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Claims 
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English Abstract 

A telephone call recording and recorded call retrieval system (10) 
records telephone conversations and stores the recorded conversations for 
later retrieval. The system includes on one or more servers (12) coupled 



to the PSTN (14), but preferably separate from mobile and land-based 
telephone company switches. A first server (12) includes telephony, call 
recording, and call conferencing functionality. A subscriber calls an 
access telephone number for the first sever and is routed to the server 
by the PSTN (14). The subscriber has several options with respect to the 
type of recording: dictation-type recording, automatic recording upon 
dialing and answer by a called party, or selective recording of any 
portion of a conversation upon activation of pre-assigned keys on the 
telephone. The recorded calls are then stored for later retrieval by the 
subscriber, e.g., on a storage server (22.22a). According to an 
embodiment, the subscriber may record received calls. 

French Abstract 

La presente invention concerne un systeme d 1 enregistrement d* appels 
telephoniques et de recuperation d ! appels enregistres qui enregistre les 
conversations telephoniques et stocke les conversations enregistrees en 
vue de leur recuperation ulterieure. Le systeme de l 1 invention comprend 
un ou plusieurs serveurs couples au RTPC, mais de preference separes des 
commutateurs des compagnies telephoniques mobiles et terrestres. Un 
premier serveur assure les f onctionnalites de telephonie, enregistrement 
d'appels et conferences d'appels. Un abonne qui forme un numero de 
telephone d'acces au premier serveur est achemine vers ce serveur par le 
RTPC. L 1 abonne dispose de plusieurs options concernant le type 
d' enregistrement : enregistrement de type dictee, enregistrement 
automatique des le moment ou le numero compose recoit une reponse de la 
part de l'appele, ou enregistrement selectif d'une quelconque partie de 
la conversation par activation de touches pre-selectionnees sur le ' 
telephone. Les appels enregistres sont alors stockes afin de pouvoir 
ensuite etre recuperes par 1' abonne, par exemple sur un serveur de 
stockage. Dans un mode de realisation, 1 1 abonne peut egalement 
enregistrer les appels recus. 
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Detailed Description 

... the initial called party at the destination telephone number. 

The addition en individually call a conference access number for the 
server at 336. 

Each additional party enters the ID key at 338. The server verifies 
the key at 340 and, if the entered, key matches an ID key active in 
the system at 342, the server connects the party to the conference... 
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Claims 

Fulltext Word Count: 13616 
English Abstract 

According to one embodiment of the invention, a free preview of a program 
can be provided to client computers in a multicasting system. This can 
allow viewers in the multicasting system to view a first portion of the 
program before deciding whether to order the program content. According 
to another embodiment, various distribution methods can be accomplished 
using encryption keys to distribute program content. According to yet 
another embodiment, an initial viewing period can be provided to allow 
negotiation of the encryption keys. According to another embodiment, 
rules and conditions for providing content in a multicasting environment 
can be utilized. 

French Abstract 

Cette invention a trait a un apercu libre d f un programme fourni a des 
ordinateurs clients dans un systeme de multidif fusion . Les visualiseurs 
peuvent dans un systeme de multidif fusion visionner une premiere partie 
du programme, avant de decider de commander ou non le contenu du 
programme. Selon un autre mode de realisation, on peut realiser divers 
procedes de distribution au moyen des cles de chiffrement pour distribuer 
le contenu du programme. Selon un autre mode de realisation, une periode 
de visualisation initiale peut etre mise a disposition pour permettfe la 
negociation des. cles de chiffrement. Selon un autre mode de realisation, 
on peut utiliser des regies et des conditions de distribution du contenu 
dans un environnement multidif fusion. 
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Detailed Description 

Detailed Description 

periodically given new keys using a multicast UDP message which has a 
new program segment key encrypted for each participant using that 
participant's unique key . 

When a client decides to leave the multicast session, the client sends 
an authenticated request to the server asking to be removed from the 
list. This signals the server to log the time... 
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English Abstract 

According to one embodiment of the invention, a free preview of a program 
can be provided to client computers in a multicasting system. This can 
allow viewers in the multicasting system to view a first portion of the 
program before deciding whether to order the program content. According 
to another embodiment, various distribution methods can be accomplished 
using encryption keys to distribute progam content. According to yet 
another embodiment, an initial viewing period can be provided to allow 
negociation of the encryption keys. According to another embodiment, 
rules and conditions for providing content in a multicasting environment 
can be utilized. 

French Abstract 

Selon un premier mode de realisation, 1' invention concerne une 
previsualisation gratuite de programme pouvant etre fournie a des 
ordinateurs de clients d ! un systeme multidestinataire, ce qui permet a 
ces utilisateurs de visualiser une premiere partie de programme avant de 
demander le contenu de ce programme. Selon un deuxieme mode de 
realisation, differents procedes de distribution permettent de distribuer 
un contenu de programme a l'aide de cles de cryptage. Selon un troisieme 
mode de realisation, une periode de visualisation initiale peut etre 
fournie afin de permettre la negociation de cles de cryptage. Selon un 
quatrieme mode de realisation, on peut utiliser des regies et des 
conditions de distribution de contenu dans un environnement 
multidestinataire . 
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Detailed Description 

periodically given new keys using a multicast UDP message which has a 
new program segment key encrypted for each participant using that 
participant's unique key . 

When a client decides to leave the multicast session, the client sends 
an authenticated request to the server asking to be removed from the 
list. This signals the server to log the time... 
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Claims 

Fulltext Word Count: 1632 6 
English Abstract 

According to one embodiment of the invention, a free preview of a program 
can be provided to client computers in a multicasting system. This can 
allow viewers in the multicasting system to view a first portion of the 
program before deciding whether to order the program content. According 
to "another embodiment, various distribution methods can be accomplished 
using encyrption keys to distribute program content. According to yet 
another embodiment, an initial viewing period can be provided to allow 
negotiation of the encryption keys. According to another embodiment, 
rules and conditions for providing content in a multicasting environment 
can be utilized. 

French Abstract 

Selon un mode de realisation de 1' invention, un visionnement gratuit d'un 
programme peut etre fourni a des ordinateurs-clients dans un systeme de 
multi-diffusion. Cela permet aux telespectateurs dans le systeme de 
multi-diffusion de visionner une premiere partie du programme avant de 
decider s'ils veulent commander le contenu du programme. Selon un autre 
mode de realisation, des procedes divers de distribution peuvent etre 
effectues en utilisant des cles de chiffrement pour la diffusion de 
contenu de programmes. Selon encore un autre mode de realisation, une 
periode de visionnement initial peut etre fournie afin de permettre la 
negociation de cles de chiffrement. Selon encore un autre mode de 
realisation, on peut mettre en oeuvre des regies et des conditions de 
fourniture de contenu dans un environnement de multi-diffusion. Fig. 1 : 
108 SERVEUR(S) D 1 ORIGINE 118 SERVEUR(S) D 1 ORIGINE EXTERNE 124 ANNUAIRE 
SUPERPOSE 104 ANNUAIRE ACTIF 120 INTERNET 112. . ORDINATEUR-CLIENT 116 
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... periodically given new keys using a multicast UDP' message which has a 
new program segment key encrypted for each participant using that 
participant's unique key . 

■\ 

When a client decides to leave the multicast session, the client sends 
an authenticated request to the server asking to be removed from the 
list. This signals the server to log the time... 
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Claims 

Fulltext Word Count: 19330 
English Abstract 

Methods and apparatus (100) are described for facilitating a first 
conference between a plurality of clients (108) on a network. A request 
to join a first conference is received from a first one of the plurality 
of clients (108) via the network. In response to the request, it is 
determined whether the first conference is currently being facilitated on 
any of a plurality of media servers (1-9). Where the first conference is 
currently being facilitated on a first one of the plurality of media 
servers (1-9), the first client (108) is dispatched to the first 
conference on the first media server (1) . Where the first conference is 
not currently being facilitated on any of the plurality of media servers 
(1-9), creation of the first conference on a second one of the plurality 
of media servers (1-9) is triggered, and the first client (108) is 
dispatched to the first conference on the second media server (2) . 

French Abstract 

L* invention concerne des procedes et un appareil (100) permettant de 
tenir une premiere conference entre plusieurs clients (108) d'un reseau, 
Un premier client (108) envoie par le reseau une demande de participation 
a une premiere conference. En reponse a la demande, on determine si la 
premiere conference se tient dans un serveur (1-9) de medias selectionne 
parmi plusieurs serveurs de medias. Lorsque la premiere conference se 
tient dans un premier serveur de- medias selectionne parmi plusieurs 
serveurs (1-9) de medias, le premier client (108) est aiguille vers la 
premiere conference dans le premier serveur (1) de medias. Lorsque la 
premiere conference ne se tient pas dans 1 ' un des multiples serveurs 
(1-9) de medias, on reporte la premiere conference sur un deuxieme 
serveur selectionne parmi les multiples serveurs (1-9) de medias et on 
aiguille le premier client (108) vers la premiere conference dans le 
deuxieme serveur (2) de medias. 
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Claims 
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Claim 

available capacity is done with reference to a number of users 
associated with the first conference . 

8 The method of claim 1 further comprising: 

I 0 receiving an initial request with an authentication server , the 
initial request 

being from the first client to join the first conference ; 
validating the initial request; and 

dispatching the first client to the dispatch server. 1 5... 



of the first conference on a first one of the media servers where the 
first conference is not currently being facilitated. 

31 The system of claim 30 further comprising an authentication server 
for receiving an initial request from the first client to join the first 
conference , validating the initial request, and dispatching the first 

client to the dispatch server. 



32 The. 
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Claims 

Fulltext Word Count: 11607 
English Abstract 

A method comprising the steps of: receiving via Internet (16) a time, a 
date and a telephone number for a reminder call (such as a wakeup call) ; 
storing in a database (22) the time, date and telephone number of the 
reminder telephone call; 'and delivering to the subscriber via telephone . 
(14ba, 14b, 14c) the reminder telephone call; and delivering to the 
subscriber via telephone (14ba, 14b, 14c) the reminder telephone call at 
the specified time, date and telephone number. In one embodiment, the 
reminder call comprises a marketing message. In another embodiment, the 
method further comprises the steps of: receiving via the Internet (16) 
demographic information (102) corresponding to the subscriber; matching 
the marketing message to the demographic information (130); and 
delivering the matched marketing message to the subscriber during the 
-reminder telephone call (132) . In other embodiments, the method further 
comprises the steps of receiving via the Internet (16) a personal 
reminder message or a selection for information, and delivering the 
personal reminder message or selected information to the subscriber 
during the reminder telephone call (132) . 

French Abstract 

La presente invention concerne un procede qui consiste a recevoir via 
1' Internet (16) une heure, une date et un numero de telephone pour un 
rappel telephone (tel qu 1 un rappel de reveil) , a stocker, dans une base 
de donnees (22), l ! heure, la date et le numero de telephone du rappel 
telephone, et a effectuer, a l f aide du telephone (14a, 14b, 14c), le 
rappel destine a 1 1 abonne a 1' heure, a la date et au numero de telephone 



specifies. Dans une realisation, le rappel telephone comporte un message 
marketing. Dans une autre realisation, le procede consiste en outre a 
recevoir via 1 ' Internet (16) une information demographique (102) 
correspondant a l'abonne, a faire correspondre le message marketing a 
1 ' information demographique, et (130) a delivrer le message marketing 
correspondant a l'abonne durant le rappel telephone (132). Dans d'autres 
realisations, le procede consiste en outre a recevoir via 1' Internet (16) 
un message de rappel personnel ou un choix pour des informations, et a 
delivrer le message de rappel personnel ou 1 1 information choisie a 
l'abonne lors du rappel telephone (132). 
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English Abstract 

^A number of techniques permit a plurality of servers to provide access 
to information replicated on the servers and accessed by connecting to a 
well published address. One approach involves an extension of 
multicasting in which source specifics joins and leaves are utilized to 
partition the address space to be serviced by a particular server. When a 
different address space allocation is desired in accordance with the load 
balancing policy, a plurality of techniques are utilized to ensure that a 
connected user obtains the needed information. A second approach involves 
an extension to the TCP protocol to enable dynamic TCP designations. With 
this option, a sender provides a tag and a cookie which a server can use. 
A server replies with a tag, a cookie and destination information. A 
security mechanism can be utilized to prevent the connection from being 
hijacked when a "change destination" message is sent. The third approach 
utilizes tag switching. A pool of servers is supported behind at least 
one virtual IP address. The servers servicing that IP address set up a 
family of tag switch trees, one for each server. When a virtual IP 
machine receives a tag-less packet, it directs one or more upstream 
routers to either an actual IP address to which subsequent packets should 
be directed or to a tag switched tree to which the connection should be 
directed. In this manner, dynamic load balancing among servers handling 
connection requests to a well published network address can be achieved. 

French Abstract 

Plusieurs techniques permettent a une pluralite de serveurs de fournir 
des acces a de 1 1 information ' repliquee sur des serveurs, I'acces 
utilisant en 1 1 occurrence une connexion a une adresse du domaine public. 
L'une des approches implique une extension de la multidif fusion dans 
lesquelles des articulations et des feuilles specif iques d ! une source 



servent a partitionner l'espace d ' adressage devant etre desservi par un 
serveur particulier. Lorsqu'on desire 1 ' affectation d'un espace 
d* adressage different pour "tenir compte de regies d 1 equilibrage des 
charges, on utilise differentes techniques permettant de s 1 assurer que 
1 1 utilisateur connecte recoit bien 1 1 information voulue . Une autre 
approche implique une extension aboutissant au protocole TCP de facon a 
permettre une designation dynamique des TCP. Avec cette option, un 
emetteur fournit une etiquette et un tampon utilisables par un serveur. 
Un serveur reagit avec une etiquette, un tampon, et une information de 
destination. II est possible d'utiliser un mecanisme de securite 
empechant 1 1 interception d'une connexion lors de 1' envoi d f un message de 
changement de destination. La troisieme approche utilise la commutation 
d ' etiquettes . Un groupe de serveurs utilise un adossement a au moins une 
adresse IP virtuelle. Les serveurs desservant cette adresse IP 
etablissent une famille d f arbres de commutation d f etiquettes, a raison 
d ? un arbre pour chaque serveur. Lorsqu f une machine IP virtuelle recoit un 
paquet sans etiquette, elle oriente au moins un module amont 
d' acheminement, soit vers une adresse IP reelle sur laquelle il faut 
desormais diriger la suite des paquets, soit vers un arbre a commutation 
d 1 etiquettes sur lequel la connexion doit etre renvoyee. II est ainsi 
possible de realiser une repartition dynamique de la charge entre 
serveurs traitant les demandes de connexion se rapportant a des adresses 
d ! un reseau du domaine public. 
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. . . on need. The owner of the multicast or 

other designated party may install the public key for 
the multicast in the DNS information for the multicast 
address or in a certification server (820) . The 
private key for the multicast is distributed to 
authorized participants in any of several known ways, 
but preferably over the... 
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Abstract (Basic) : US 20050025160 Al , 

NOVELTY - The method involves designating an organized virtual LAN 
. (VLAN) as a multicast VLAN of a multicast domain for receiving 
multicast encryption keys . An Internet group management protocol 
report targeted for an associated station of the domain is intercepted 
to identify membership of an Internet protocol (IP) multicast group. 
An IP multicast message is transmitted to an access point (145) of 
the VLAN and to the station. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for a 
system for targeting multicast- transmission over a network. 

USE - Used for organizing virtual LANs in a wireless network. 

ADVANTAGE - The method efficiently coordinates logical transmission 
and delivery of multicast encryption keys so that duplicate 
multicast transmissions are inhibited and duration of multicast 
delivery period is reduced. 

DESCRIPTION OF DRAWING (S) - The drawing shows a network block 
diagram that operates to facilitate multicast transmission to a 
number of wireless clients. 

Wireless clients (110, 115, 120, 125, 130, 135) 

Network (140) 



Access point (145) 
Switch (150) 

Authentication server (155) 
pp; 9 DwgNo 1/2 
Technology Focus: 

TECHNOLOGY FOCUS - INDUSTRIAL STANDARDS - The wireless clients are 
configured and connected to access services and receive multicast 
transmission on a IEEE 802.11 . 
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Abstract (Basic) : US 6785809 Bl 

NOVELTY - A message encrypted using a server group key , is 
multicasted to several key servers . The current and replacement 
common group keys distributed by the servers are received using the 
server group key . The current common group key is distributed to 
current members in a domain, using a member private key and a domain 
key . The messages within common multicast group are multicasted , 
using current common group key . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) computer network; 

(2) recording medium storing distributed group key management 
program; and 

(3) distributed group key management apparatus. 

USE - For managing distributed group key in multicast security, 
and also for securing multicast applications such as teleconference 
, real-time information service, pay per view, distributed interactive 



simulation, collaborative work, etc. 

ADVANTAGE - The need to separately retrieve and apply principal 
keying material on each query, is eliminated. 

DESCRIPTION OF DRAWING ( S ) - DESCRIPTION OF DRAWING - The figure 
shows a flow diagram illustrating the re-keying of member information 
to common multicast group. 
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■NOVELTY - An inhibitor key 
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to the client subsequently in response to the need of current common 
group key . The initiator key server distributes the replacement 
common group key to the key servers . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
machine-readable media storing instructions for distributed keyO group 
management . 

USE - For multicast communication, multicast security, and for 
teleconference , real-time information dissemination services, 
distributed interactive simulation and collaborative work. 

ADVANTAGE - The key is shared only by authorized principals 
confidentially, since server distributes key group to specific client 
reliably. 

DESCRIPTION OF DRAWING (S) - The figure, shows a flowchart explaining 
the distributed key group management method, 
pp; 12 DwgNo 5/5 
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Abstract (Basic) : JP 2000224155 A 

NOVELTY - A calculator computes the delay time from asking a key 
server until a share key is transmitted from the key server to 
each client. A delay device delays the encryption completed data with 
the computed delay time. When it is judged that the share key is' 
distributed from the key server during the delay process of- the 
delay device, the share key is updated and encryption of data is 
re-performed. 

DETAILED DESCRIPTION - When the share key is not distributed 
during the delay process, the data are transmitted as it is by a 
transmitting circuit. An INDEPENDENT CLAIM is also included for a data 
transmitting-and-receiving procedure. 

USE - For multi - cast communication using one share key . 

ADVANTAGE - Maintains secrecy and real-time property of data 
regardless of order of distributing of share key or transmitting and 
receiving of data using share key . 

DESCRIPTION OF DRAWING (S) - The figure shows a process flowchart 
used in case a user in a group comprised with the network system 
participates as a member. 
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Abstract (Basic) : RD 432173 A 

NOVELTY - Protocol uses a push mechanism based on Ip- multicast , 
when any server negotiating a new session places cypher specs in its 
own memory cache and multicasts an IP datagram containing them. All 
peer members in a cluster dedicate a thread to listen for the datagrams 
and add the contents to their local memory caches, using only a single 
network message for each new session regardless of the number of 
servers in the cluster. The datagram data elements consist of two index 
fields, the SSL session id (SID) and ClientIP, plus an expiration time 
stamp and an opaque blob of data. The SID is calculated using a 
randomizing routine and a key manager process is implemented in the 
peer servers, the key being encrypted using the public key of the 
SSL servers common certificate . 

USE - Protocol is for sharing of the cipher spec information used 
by server programs providing Secure Socket Layer (SSL) connections to 
client programs, enabling an Internet service to be provided by a pool 
of servers to transparently continue SSL sessions spanning conenctions 
to different machines in the pool in e.g. electronic shopping. 

ADVANTAGE - Protocol reduces server processing load and network 
data transmissions, so increasing server pool throughput, 
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Abstract (Basic): WO 200074381 Al ' 

NOVELTY - Each building connected to a distribution node, has a 
home end user unit connected to its corresponding neighborhood 
distribution node by line having carrying capacity of single twisted 
pair digital subscriber line. The end user unit is adapted to receive 
entertainment in a preset format and supply this entertainment to 
television or home computer. 

DETAILED DESCRIPTION - The system has central site which has 
servers for storing entertainment media e.g. motion pictures, 
transmitters for transmitting information from servers and workstations 
for controlling and monitoring the system. The regional site which is 
connected to central site by ATM switches, has directory servers for 
authenticating regional system connection and for routing user system 
requests. The regional site also has real time video servers for 
supplying real time video information regionally through ATM switches. 
Energy regional site has at least one area site which has several 
virtual servers and telephony gateways. The virtual server has memory 
for storing entertainment received from central site and has satellite 
receivers to receive entertainment from the central site. The area site 
has ATM switches connected to its corresponding regional site and to a 
local telephony company switch and has fiber optic connection for 
supplying entertainment and voice telephony capability to 
neighborhoods. Several neighborhood distribution nodes are connected to 
each area site by fiber optic connections. Each neighborhood 
distribution node is connected to buildings such as houses, each 
building to which the node is connected being within 6000 feet from 
distribution node which has an ATM-DSL switch. 

USE - For transmission of information such as audio, video and data 
to homes and offices. Also used to provide various services like 
network television with interactive effects ( IEF) , local network 
affiliates with IEFs, movies on demand with pause/restart music CD 



preview on demand, high speed internet access (available via TV set and 
home computer) regular (voice) telephone service, virtual answering 
machine/voice mail and option of multiple lines, video conferencing , 
remote access to participating corporate computer networks, multiple 
programmable smart cards via set top box. 

ADVANTAGE - By using ATM-DSL delivery technology, this system has 
major advantage over conventional system in that existing copper 
telephone lines can be employed for content delivery over final segment 
of (6000 feet) of transmission. Provides system which does not require 
new into-the-house wiring or cabling, existing copper, which has 
capability of delivering unlimited number of channels and which 
eliminates most fraud problems. Facilitates integration of video 
delivery with the internet and provides extraordinary high speed 
internet access. 

DESCRIPTION OF DRAWING (S) - The figure shows the heat components at 
regional level of multilevel broadband multimedia delivery system, 
pp; 56 DwgNo 5/13 
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Abstract (Basic) : WO 200060472 Al 

NOVELTY - Each of media servers (104) registers with dispatch 
server (102) which listens on port (3450) for clients requesting access 
to the system. Dispatch server maintains a 11 slave list 11 which 
includes the IP address of all currently registered media servers . 
All requests are validated by an authentication server (106) 
before clients can participate in the conference . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for a 
system for facilitating communication between multi-clients on a 
network, a dispatch and media server, a mesh server for running on a 
server object on a media server, a computer program product stored on a 
computer readable medium. 

USE - For Internet. 

ADVANTAGE - The architecture of the communication system is not 
protocol or media specific and scalable to any number of simultaneous 
users which may be used by any number of ISPs, portals, and web sites 
to implement audio or video conferences through sites. 

DESCRIPTION OF DRAWING (S) - The figure shows a simplified block 
diagram of a network communication system for real-time multi-point 
communication . 

Dispatch Server (102) 

Media Server (104) 
Authentication Server (106) 

Port (3450) 
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Transmission authentication management system for video conferencing , 
indicates clients without authentication when specific indication is 
received by server along with received authentication demand 
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Abstract (Basic): JP 11341458 A 

NOVELTY - The participation of each client (30) connected to server 
(10) is recognized. The transmission authentication is provided to the 
clients depending on the authentication result. When authentication is 
provided to all the clients, a specific notification is forwarded to 
the server. The clients without authentified transmission during 
notification is displayed along with the authentication demand. 
DETAILED DESCRIPTION - The transmission of each clients is authentified 
according to the client groups. Based on the received authentication 
demand the indication for providing authentication is output from the 
server . 

USE - For transmission authentication management of clients in 
video conferencing system. 

ADVANTAGE - As clients without authentication is displayed, 
authentication management is simplified, thereby ensures proper 
communication between clients. DESCRIPTION OF DRAWING ( S ) - The figure 
shows the block diagram of transmission authentication management 
system. (10) Server ; (30) Client. 
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Communication resources controller for multipoint conferencing using 
internet - has communication resource control agent which chooses 
communication processing server among many which has short distance with 
user and approves for utilization 

Patent Assignee: NIPPON TELEGRAPH & TELEPHONE CORP (NITE ) 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No* Kind Date Applicat No Kind Date Week 

JP 11232201 A 19990827 JP 9830209 A 19980212 199945 B 

Priority Applications (No Type Date) : JP 9830209 A 19980212 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
JP 11232201 A 33 G06F-013/00 



Abstract (Basic) : JP 11232201 A 

NOVELTY - The user terminals (TEO-TEn) send utilization demand to 
communication resource control agent (10) . This agent chooses 
communication processing server (1) which has short distance with user 
among many and approves for utilization of that server after 
confirming the user terminal. 

USE - For multipoint conferencing using internet. 

ADVANTAGE - Several terminals can make use of many servers 
depending on necessity due to allocation of appropriate server to user. 
DESCRIPTION OF DRAWING (S) - The figure shows the entire component of 
communication resource controller. (1) Communication processing server; 
(10) Communication resource control agent; (TEO-TEn) User terminals. 
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Abstract (Basic): WO 9930460 A2 

NOVELTY - Sub-networks (100) are connected together via routers 
(110) and a domain named server (DNS) (130) is resident on one 
sub-network, while a certification server or authority (150) is 
resident on another. One or more senders (14 0) may be the intended 
source of information for the multicast to exemplary user stations 
(120a,120b). 

DETAILED DESCRIPTION - Connection reset, state synchronization and\ 

\ 




update, message forwarding and tag switching are implemented for 
reallocating connections during load synchronizing. INDEPENDENT CLAIMS 
are included for a computer .network, for a computer program product and 
for computer apparatus. 

USE - Providing highly-distributed servers for network applications 
such as web servers on the Internet. 

ADVANTAGE - Accomplishing load balancing and graceful degradation 
in event of multiple network failure. 

DESCRIPTION OF DRAWING (S) - The drawing is a block diagram of 
exemplary network arrangement linking sub-networks according to one 
aspect of the invention. 

Sub-networks (100) 

Routers (110) 

DNS (130) 

Authority (150) 

Senders (140) 

User stations (120) 
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Graphical computer interface system for audio conferencing system - has 
graphical user interface (GUI) program which is executed by user computer 
system to generate displays of information on display and receive input 
by user using input device 
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Abstract (Basic) : US 5619555 A 

The system includes a telephony conference subsystem that 
performs conferencing of a number of participants coupled via 
telephones. A server is coupled to the telephony conference subsystem 
to control operations performed on the telephony conference 
subsystem. A user computer system is coupled to the server through a 
data communication network. The computer system includes a processor, a 
display and an input device. A graphical user interface (GUI) program 
is executed by the user computer system to generate displays of 
information on the display and receive input by the user using the 
input device. The user computer system executes the GUI program 



t 



prompting the user to enter a user identification and forwarding the 
user identification to the server . The server verifies that the 
user is registered and supplies to the user computer system executing 
the GUI program information regarding scheduled audio conferences 
that the user scheduled or for which the user is a designated 
participant . 

ADVANTAGE - Provides automatic audio conferencing control without 
requiring human operator. 
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